This vulnerability (CVE-2024-30469) in WPExperts Wholesale For WooCommerce is classified as CWE-200, indicating exposure of sensitive information to unauthorized actors due to missing authorization controls. It affects all versions up to 2.3.0. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to confidentiality loss. No vendor advisory or patch information is currently provided, and the plugin is not a cloud service, so remediation depends on vendor updates.

An attacker without any privileges or user interaction could remotely access sensitive information that should be protected by authorization controls. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no known active exploits targeting this vulnerability at present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor WPExperts communications for updates and consider restricting access to the affected plugin functionality until a patch is available.